Security· ★★★★· bearish·

Polkadot: Fearless Wallet extension leaked private keys for 20 months

  • —Leak ran from February 2025; versions 3.0.1 and 3.0.3–3.0.5 affected
  • —Eight users reported unauthorized transfers of 17,286 DOT
  • —Malicious code harvested seed phrases, private keys and keystore files on unlock
  • —July upgrade cut DOT unbonding from 28 days to 1–2, narrowing the recovery window
Why it matters: Faster DOT withdrawals leave less time to rescue funds from compromised staking wallets, raising risk for holders.
#DOT
Source: CryptoSlate
More on this
Security · Oct 8
Suspected private key leak drains $12.5M from 79thVault on BNB Chain
 DeFi · Oct 2
NEAR AI Cloud brings private inference to GitHub Copilot via VSCode extension
 Markets · 18:08
Polkadot's DOT Falls 6.43% to $1.01 on Below-Average Volume